sock_map: Add a cond_resched() in sock_hash_free()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 5.4.285, 5.8, 5.10.227, 5.15.168, 6.1.113, and 3 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: sock_map: Add a cond_resched() in sock_hash_free() Several syzbot soft lockup reports all have in common sock_hash_free() If a map with a large number of buckets is destroyed, we need to yield the cpu when needed.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
From 5bed77b0a2a0e6b6bc0ae8e851cafb38ef0374df · fixed in bc05f6855642cff3c0eeb63060b35d8c4f8a851d; From 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 · fixed in 1a11a1a53255ddab8a903cdae01b9d3eb2c1a47b; From 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 · fixed in 984648aac87a6a1c8fd61663bec3f7b61eafad5e; From 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 · fixed in 04f62c012e0e4683e572b30baf6004ca0a3f6772; From 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 · fixed in 80bd490ac0a3b662a489e17d8eedeb1e905a3d40; From 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 · fixed in ae8c1b3e7353ad240b829eabac7ba2584b2c6bdc; From 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 · fixed in cd10abf41bae55c9d2b93f34a516dbf52626bcb7; From 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 · fixed in b1339be951ad31947ae19bc25cb08769bf255100; From 5.4.49 · fixed in 5.4.285; From 5.7.6 · fixed in 5.8
- Linux Linux
5.8
- KernelLinux
fixed in 5.4.285; From 5.5.0 · fixed in 5.10.227; From 5.8.0 · fixed in 5.15.168; From 5.11.0 · fixed in 6.1.113; From 5.16.0 · fixed in 6.6.54; From 6.2.0 · fixed in 6.10.13; From 6.7.0 · fixed in 6.11.2
References 8
git.kernel.org
- stable/c/bc05f6855642cff3c0eeb63060b35d8c4f8a851d
- stable/c/1a11a1a53255ddab8a903cdae01b9d3eb2c1a47b
- stable/c/984648aac87a6a1c8fd61663bec3f7b61eafad5e
- stable/c/04f62c012e0e4683e572b30baf6004ca0a3f6772
- stable/c/80bd490ac0a3b662a489e17d8eedeb1e905a3d40
- stable/c/ae8c1b3e7353ad240b829eabac7ba2584b2c6bdc
- stable/c/cd10abf41bae55c9d2b93f34a516dbf52626bcb7
- stable/c/b1339be951ad31947ae19bc25cb08769bf255100